After Russian Hackers Knocked Out a Satellite Network, an AI Tool Is Now Stress-Testing Its Defences
Viasat's satellite network was crippled by a Russian cyberattack in 2022. Now an AI-assisted security tool from Atalanta is being used to check whether the rebuilt defences can hold.
Key points
- Russian hackers attacked Viasat's KA-SAT satellite communications network in February 2022, knocking out internet service for customers across Europe.
- Atalanta's security tool, called Argo, is now being used to test whether Viasat's network can withstand a similar attack.
- Argo uses artificial intelligence to simulate attacks and find weaknesses before real criminals do.
- The exercise is part of a broader push to harden critical communications infrastructure against state-sponsored hacking.
What actually happened to Viasat in 2022?
On the morning Russia invaded Ukraine, a cyberattack wiped out satellite modems, the small hardware boxes that connect homes and businesses to a satellite internet service. The attack hit Viasat's KA-SAT network, knocking out internet access for customers across Ukraine, Germany, France and elsewhere in Europe. Wind turbines in Germany lost their remote-monitoring connections. U.S. And allied governments later attributed the attack to Russian military intelligence.
Malicious software was delivered through a misconfigured part of Viasat's network management system, overwriting the modems' internal software and permanently disabling them. Replacement hardware had to be physically shipped to customers. This isn't a story about someone changing a password. It's infrastructure destruction.
How does an AI tool help now?
Atalanta's product, Argo, acts as a tireless digital attacker that the security team controls. It maps out the network, finds paths a real criminal might take to move between systems, and flags gaps before anyone malicious finds them. The security industry calls this penetration testing, or pen testing, where a trusted party probes a system for weaknesses the way a burglar might case a building.
What AI adds is speed and scale. A human team can test a limited number of paths; an automated tool can test thousands, continuously, as the network changes. SecurityWeek first reported Atalanta's involvement with Viasat.
| Event | Date | Detail |
|---|---|---|
| KA-SAT attack begins | Feb 2022 | Timed with Russia's invasion of Ukraine |
| U.S./EU attribution | May 2022 | Blamed on Russian military intelligence |
| Argo deployment at Viasat | 2024-2025 | Ongoing resilience testing |
Should ordinary people care about satellite security?
More than most realise. Satellite networks carry emergency services communications, military logistics, remote hospital connectivity and the internet links that keep power grids talking to their operators. When that layer goes dark, the effects land on real people fast.
If you're a Viasat customer, there's nothing specific to do right now. The current exercise is defensive. But the equipment on your roof is part of a network that nation-states treat as a legitimate military target, as our coverage of Russian-linked cyber operations and attacks on ports and water systems has repeatedly shown.
The failure mode is assuming that rebuilding after an attack is enough. Networks change constantly, and a defence that held last year may have a new gap today. Continuous, automated testing is the operational answer to that problem.
Patching the exploited hole is step one. Proving the rest of the wall still stands is the step most organisations skip.
